Wireshark-bugs: [Wireshark-bugs] [Bug 13213] RPC dissector doesn't match Replies to Calls with R
Date: Wed, 21 Dec 2016 15:36:43 +0000

Comment # 18 on bug 13213 from
(In reply to Michael Mann from comment #17)
> Wireshark always does 2 passes over every packet (first pass is every packet
> in order, 2 pass isn't guaranteed to be in that order).
> TShark defaults to a single pass before output, which can affect dissectors
> that have state processing involving multiple packets, because not all
> packets are guaranteed to arrive in order.  So when you want
> request/response data, always pass -2 to TShark.

I'll give that a try next time I use tshark. The problems I see occur with
wireshark.


You are receiving this mail because:
  • You are watching all bug changes.